Enhanced pushdown automaton based static analysis for detection of SQL injection Hotspots in web application

• Main Authors: Umar, Kabir, Md Sultan, Abu Bakar, Zulzalil, Hazura, Admodisastro, Novia Indriaty, Abdullah @ Selimun, Mohd Taufik
• Format: Article
• Language: English
• Published: Indian Society for Education and Environment 2016
• Online Access: http://psasir.upm.edu.my/id/eprint/54163/1/Enhanced%20pushdown%20automaton%20based%20static%20analysis%20for%20detection%20of%20SQL%20injection%20Hotspots%20in%20web%20application.pdf; http://psasir.upm.edu.my/id/eprint/54163/; http://www.indjst.org/index.php/indjst/article/view/97808

SQL injection Hotspots (SQLiHs) are Application’s Entry Points (AEPs) through which SQL injection is possible, subject to the application’s internal sanitization or validation capabilities. Since not all AEPs are SQLiHs, one serious challenge during testing of very large web application for detectio...